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CLAIMS 

1. A terminal-device authentication system characterized 
by comprising: 

5 a service server for, when a service requiring device 

authentication is supplied to a terminal device, 
transmitting connection information for a first allocation 
server to the terminal device and receiving an 
authentication result from the terminal device; 

10 the first allocation server receiving first allocation 

information from the terminal device and transmitting 
connection information for a second allocation server 
corresponding to the first allocation information; 
the second allocation server receiving second 

15 allocation information from the terminal device and 

transmitting connection information for an authentication 
server corresponding to the second allocation information; 
and 

the authentication server receiving authentication 
2 0 information from the terminal device to perform the device 

authentication and transmitting the authentication result to 
the terminal device . 

2. The terminal device that utilizes the service provided 
by the service server in the terminal-device authentication 

25 system according to Claim 1, the terminal device being 
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characterized by comprising: 

first receiving means for receiving from the service 
server the connection information for the first allocation 
server; 

5 first transmitting means for connecting to the first 

allocation server based on the connection information 
received by the first receiving means to transmit the first 
allocation information to the first allocation server; 

second receiving means for receiving the connection 
10 information for the second allocation server corresponding 
to the transmitted first allocation information from the 
first allocation server; 

second transmitting means for connecting to the second 
allocation server based on the connection information 
15 received by the second receiving means to transmit the 
second allocation information to the second allocation 
server; 

third receiving means for receiving from the second 
allocation server the connection information for the 
2 0 authentication server corresponding to the transmitted 
second allocation information; 

authentication-information transmitting means for 
connecting to the authentication server based on the 
connection information received by the third receiving means 
2 5 to transmit the authentication information to the 
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authentication server; 

authentication-result receiving means for receiving 
from the authentication server the authentication result 
based on the authentication information transmitted by the 
5 authentication-information transmitting means; and 

authentication-result transmitting means for. 
transmitting the authentication result received by the 
authentication-result receiving means to the service server. 

3. The first allocation server that provides the 

10 connection information for the second allocation server to 
the terminal device in the terminal-device authentication 
system according to Claim 1, the first allocation server 
being characterized by comprising: 

receiving means for connecting to the terminal device 

15 to receive the first allocation information from the 
terminal device; and 

transmitting means for transmitting the connection 
information for the second allocation server corresponding 
to the received first allocation information to the terminal 

20 device. 

4. A terminal-device authentication system characterized 
by comprising: 

a service server for, when a service requiring device 
authentication is supplied to a terminal device, receiving 
2 5 allocation information from the terminal device, receiving 
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connection information for an authentication server from an 
allocation system based on the received allocation 
information, transmitting the received connection 
information to the terminal device, and receiving an 
5 authentication result in the authentication server from the 
terminal device; 

the allocation system receiving the allocation 
information from the service server and transmitting to the 
service server the connection information for the 
10 authentication server corresponding to the received 
allocation information; and 

the authentication server receiving authentication 
information from the terminal device to authenticate the 
terminal device and transmitting the authentication result 
15 of the device authentication to the terminal device. 

5. The allocation system that provides the connection 
information for the authentication server to the service 
server in the terminal-device authentication system 
according to Claim 4, the allocation system being 
20 characterized by comprising: 

allocation-information receiving means for receiving 
the allocation information from the service server; and 

connection-information transmitting means for 
transmitting the connection information for the 
25 authentication server corresponding to the received 
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allocation information. 

6. The service server that provides the service to the 
terminal device in the terminal-device authentication system 
according to Claim 4, the service server being characterized 

5 by comprising: 

allocation-information receiving means for receiving 
the allocation information from the terminal device; 

allocation-information transmitting means for 
transmitting the received allocation information to the 
10 allocation system; 

connection-information receiving means for receiving 
from the allocation system the connection information for 
the authentication server corresponding to the transmitted 
allocation information; and 
15 connection-information transmitting means for 

transmitting the received connection information to the 
terminal- device. 

7. The allocation system according to Claim 5, 

the allocation information being characterized by 
20 including first allocation information and second allocation 
information, and 

the allocation system being characterized by 
comprising : 

a first allocation server receiving the first 
25 allocation information from the service server and 
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transmitting to the service server connection information 
for a second allocation server corresponding to the first 
allocation information; and 

the second allocation server receiving the second 
5 allocation information form the service server and 
transmitting to the service server the connection 
information for the authentication server corresponding to 
the second allocation information. 

8. The service server that receives the connection 
10 information for the authentication server from the 

allocation system according to Claim 7, the service server 
being characterized by comprising: 

allocation-information receiving means for receiving 
the first allocation information and the second allocation 
15 information from the terminal device; 

first transmitting means for connecting to the first 
allocation server to transmit the received first allocation 
information to the first allocation server; 

first receiving means for receiving from the first 
2 0 allocation server the connection information for the second 
allocation server corresponding to the transmitted first 
allocation information; 

second transmitting means for connecting to the second 
allocation server based on the connection information 
2 5 received by the first receiving means to transmit the second 
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allocation information to the second allocation server; 

second receiving means for receiving from the second 
allocation server the connection information for the 
authentication server corresponding to the transmitted 
5 second allocation information; and 

connection-information transmitting means for 
transmitting the connection information received by the 
second receiving means to the terminal device. 

9. The first allocation server that provides the 

10 connection information for the second allocation server to 
the service server in the allocation system according to 
Claim 7, the first allocation server being characterized by 
comprising : 

receiving means for receiving the first allocation 
15 information from the service server; and 

transmitting means for transmitting the connection 
information for the second allocation server corresponding 
to the received first allocation information. 

10. The second allocation server that provides the 

2 0 connection information for the authentication server to the 

service server in the allocation system according to Claim 7 , 
the second allocation server being characterized by 
comprising : 

receiving means for receiving the second allocation 
25 information from the service server; and 
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transmitting means for transmitting the connection 
information for the authentication server corresponding to 
the received second allocation information. 

11. A method for a terminal device, adopted in a computer 
5 that utilizes the service provided by the service server in 
the terminal-device authentication system according to Claim 

1, 

the computer being characterized by comprising first 
receiving means, first transmitting means, second receiving 

10 means, second transmitting means, third receiving means, 
authentication-information transmitting means, 
authentication-result receiving means, and authentication- 
result transmitting means, and the method being 
characterized by comprising: 

15 a first receiving step of receiving, by the first 

receiving means, the connection information for the first 
allocation server from the service server; 

a first transmitting step of connecting to the first 
allocation server based on the connection information 

20 received in the first receiving step to transmit the first 

allocation information to the first allocation server by the 
first transmitting means; 

a second receiving step of receiving, by the second 
receiving means, the connection information for the second 

25 allocation server corresponding to the transmitted first 
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allocation information from the first allocation server; 

a second transmitting step of connecting to the second 
allocation server based on the connection information 
received in the second receiving step to transmit the second 
5 allocation information to the second allocation server by 
the second transmitting means; 

a third receiving step of receiving, by the third 
receiving means, the connection information for the 
authentication server corresponding to the transmitted 
10 second allocation information from the second allocation 
server; 

an authentication-information transmitting step of 
connecting to the authentication server based on the 
connection information received in the third receiving step 
15 to transmit the authentication information to the 

authentication server by the authentication-information 
transmitting means; 

an authentication-result receiving step of receiving, 
by the authentication-result receiving means, the 
2 0 authentication result based on the authentication 

information transmitted in the authentication-information 
.transmitting step from the authentication server; and 

an authentication-result transmitting step of 
transmitting, by the authentication-result transmitting 
25 means, the authentication result received in the 
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authentication-result receiving step to the service server. 

12 . A first allocation method of providing the connection 
information for the second allocation server to the terminal 
device in the terminal-device authentication system 

5 according to Claim 1, 

the first allocation method being adopted in a computer 
including receiving means and transmitting means, and the 
first allocation method being characterized by comprising: 
a receiving step of connecting to the terminal device 
10 to receive the first allocation information from the 
terminal device by the receiving means; and 

a transmitting step of transmitting, by the 
transmitting means, the connection information for the 
second allocation server corresponding to the received first 
15 allocation information to the terminal device. 

13. An allocation method of providing the connection 
information for the authentication server to the service 
server in the terminal-device authentication system 
according to Claim 4, 

20 the allocation method being adopted in a computer 

system including allocation-information receiving means and 
connection-information transmitting means, and the 
allocation method being characterized by comprising: 

an allocation-information receiving step of receiving, 

25 by the allocation-information receiving means, the 
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allocation information from the service server; and 

a connection-information transmitting step of 
transmitting, by the connection-information transmitting 
means, the connection information for the authentication 
5 server corresponding to the received allocation information. 
14. A service providing method of providing the service 
to the terminal device in the terminal-device authentication 
system according to Claim 4, 

the service providing method being adopted in a 
10 computer including allocation-information receiving means, 
allocation-information transmitting means, connection- 
information receiving means, and connection-information 
transmitting means, and the service providing method being 
characterized by comprising: 
15 an allocation-information receiving step of receiving, 

by the allocation-information receiving means, the 
allocation information from the terminal device; 

an allocation-information transmitting step of 
transmitting, by the allocation-information transmitting 
20 means, the received allocation information to the allocation 
system; 

a connection-information receiving step of receiving, 
by the connection-information receiving means, the 
connection information for the authentication server 
2 5 corresponding to the transmitted allocation information from 
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the allocation system; and 

a connection-information transmitting step of 
transmitting, by the connection-information transmitting 
means, the received connection information to the terminal 
5 device. 

15. A method for a service server, of receiving the 
connection information for the authentication server from 
the allocation system according to Claim 7, 

the method being adopted in a computer including 
10 allocation-information receiving means, first transmitting 
means, first receiving means, second transmitting means, 
second receiving means, and connection-information 
transmitting means, and the method being characterized by 
comprising : 

15 an allocation-information receiving step of receiving, 

by the allocation-information receiving means, the first 
allocation information and the second allocation information 
from the terminal device; 

a first transmitting step of connecting to the first 

2 0 allocation server to transmit the received first allocation 
information to the first allocation server by the first 
transmitting means; 

a first receiving step of receiving, by the first 
receiving means, the connection information for the second 

25 allocation server corresponding to the transmitted first 
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allocation information from the first allocation server; 

a second transmitting step of connecting to the second 
allocation server based on the connection information 
received in the first receiving step to transmit the second 
5 allocation information to the second allocation server by 
the second transmitting means; 

a second receiving step of receiving, by the second 
receiving means, the connection information for the 
authentication server corresponding to the transmitted 
10 second allocation information from the second allocation 
server; and 

a connection-information transmitting step of 
transmitting, by the connection-information transmitting 
means, the connection information received in the second 
15 receiving step to the terminal device . 

16. A first allocation method of providing the connection 
information for the second allocation server to the service 
server in the allocation system according to Claim 7, 

the first allocation method being adopted in a computer 
2 0 including receiving means and transmitting means, and the 
first allocation method being characterized by comprising: 
a receiving step of receiving, by the receiving means, 
the first allocation information from the service server; 
and 

2 5 a transmitting step of transmitting, by the 
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transmitting means, the connection information for the 
second allocation server corresponding to the received first 
allocation information . 

17. A second allocation method of providing the 

5 connection information for the authentication server to the 
service server in the allocation system according to Claim 7, 

the second allocation method being adopted in a 
computer including receiving means and transmitting means, 
and the second allocation method being characterized by 
10 comprising: 

a receiving step of receiving, by the receiving means, 
the second allocation information from the service server; 
and 

a transmitting step of transmitting, by the 
15 transmitting means, the connection information for the 

authentication server corresponding to the received second 
allocation information . 

18. A terminal device program used in the terminal device 
including a computer that utilizes the service provided by 

2 0 the service server in the terminal-device authentication 
system according to Claim 1, the terminal device program 
realizing : 

a first receiving function of receiving the connection 
information for the first allocation server from the service 
25 server; 
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a first transmitting function of connecting to the 
first allocation server based on the connection information 
received in the first receiving function to transmit the 
first allocation information to the first allocation server; 
5 a second receiving function of receiving the connection 

information for the second allocation server corresponding 
to the transmitted first allocation information from the 
first allocation server; 

a first transmitting function of connecting to the 
10 second allocation server based on the connection information 
received in the second receiving function to transmit the 
second allocation information to the second allocation 
server; 

a third receiving function of receiving the connection 
15 information for the authentication server corresponding to 
the transmitted second allocation information from the 
second allocation server; 

an authentication-information transmitting function of 
connecting to the authentication server based on the 
2 0 connection information received in the third receiving 

function to transmit the authentication information to the 
authentication server; 

an authentication-result receiving function of 
receiving the authentication result based on the 
2 5 authentication information transmitted in the 
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authentication-information transmitting function from the 
authentication server; and 

an authentication-result transmitting function of 
transmitting the authentication result received in the 
5 authentication-result receiving function to the service 
server. 

19. A first allocation program used in the first 
allocation server that is a computer providing the 
connection information for the second allocation server to 
10 the terminal device in the terminal-device authentication 
system according to Claim 1, the first allocation program 
realizing: 

a receiving function of connecting to the terminal 
device to receive the first allocation information from the 
15 terminal device; and 

a transmitting function of transmitting the connection 
information for the second allocation server corresponding 
to the received first allocation information to the terminal 
device. 

20 20. An allocation program used in the allocation system 

that is a computer providing the connection information for 
the authentication server to the service server in the 
terminal-device authentication system according to Claim 4, 
the allocation program realizing: 

2 5 an allocation-information receiving function of 
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receiving the allocation information from the service 
server; and 

a connection-information transmitting function of 
transmitting the connection information for the 
5 authentication server corresponding to the received 
allocation information . 

21. A service server program used in the service server 
that is a computer providing the service to the terminal 
device in the terminal-device authentication system 

10 according to Claim 4, the service server program realizing: 
an allocation-information receiving function of 
receiving the allocation information from the terminal 
device; 

an allocation-information transmitting function of 
15 transmitting the received allocation information to the 
allocation system; 

a connection-information receiving function of 
receiving the connection information for the authentication 
server corresponding to the transmitted allocation 
2 0 information from the allocation system; and 

a connection-information transmitting function of 
transmitting the received connection information to the 
terminal device. 

22. A service server program used in the service server 
25 that is a computer receiving the connection information for 
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the authentication server from the allocation system 
according to Claim 7 , the service server program realizing: 

an allocation-information receiving function of 
receiving the first allocation information and the second 
5 allocation information from the terminal device; 

a first transmitting function of connecting to the 
first allocation server to transmit the received first 
allocation information to the first allocation server; 

a first receiving function of receiving the connection 
10 information for the second allocation server corresponding 
to the transmitted first allocation information from the 
first allocation server; 

a second transmitting function of connecting to the 
second allocation server based on the connection information 
15 received in the first receiving function to transmit the 
second allocation information to the second allocation 
server; 

a second receiving function of receiving the connection 
information for the authentication server corresponding to 
2 0 the transmitted second allocation information from the 
second allocation server; and 

a connection-information transmitting function of 
transmitting the connection information received in the 
second receiving function to the terminal device . 
25 23. A first allocation program used in the first 
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allocation server that is a computer providing the 
connection information for the second allocation server to 
the service server in the allocation system according to 
Claim 7, the first allocation program realizing: 
5 a receiving function of receiving the first allocation 

information from the service server; and 

a transmitting function of transmitting the connection 
information for the second allocation server corresponding 
to the received first allocation information. 

10 24. A second allocation program used in the second 

allocation server that is a computer providing the 
connection information for the authentication server to the 
service server in the allocation system according to Claim 7 , 
the second allocation program realizing: 

15 a receiving function of receiving the second allocation 

information from the service server; and 

a transmitting function of transmitting the connection 
information for the authentication server corresponding to 
the received second allocation information. 

2 0 25. A storage medium readable by a computer storing the 

terminal device program according to Claim 18. 

26. A storage medium readable by a computer storing the 
first allocation program according to Claim 19. 

27. A storage medium readable by a computer storing the 
25 allocation program according to Claim 20. 
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28. A storage medium readable by a computer storing the 
service server program according to Claim 21 or 22, 

29. A storage medium readable by a computer storing the 
first allocation program according to Claim 23. 

5 30. A storage medium readable by a computer storing the 

second allocation program according to Claim 24. 

31. The terminal device according to Claim 2 further 
comprising: 

connection-information storing means for storing the 
10 connection information for the authentication server 
received by the third receiving means; and 

confirming means for confirming whether, when the 
connection information for the first allocation server is 
received from the service server, the connection information 
15 is stored in the connection-information storing means, 

the terminal device being characterized in that, when 
the confirming means confirms that the connection 
information is stored, the authentication-information 
transmitting means connects to the authentication server 
2 0 based on the stored connection information to transmit the 
authentication information. 

32. The terminal device according to Claim 31, 
characterized in that, when the authentication-information 
transmitting means is not able to connect to the 

2 5 authentication server based on the connection information 
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stored in the connection-information storing means , the 
authentication-information transmitting means uses the 
connection information for the authentication server, 
acquired by using the first transmitting means, the second 
5 receiving means, the second transmitting means, and the 
third receiving means based on the connection information 
received by the first receiving means, to connect to the 
authentication server and transmits the authentication 
information, and 
10 in that the connection-information storing means uses 

the acquired connection information for the authentication 
server to update the stored connection information. 



